Principal Security Awareness, Human Risk Engineer

🕒 September 2

🌐 United States, United Kingdom – Remote

🇺🇸 United States – Remote 🇬🇧 United Kingdom – Remote

💵 $203.2k - $275k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GitLab

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2014

💼 Consulting

📣 Marketing

🤖 Artificial Intelligence

💰 Secondary Market on 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab is the most comprehensive AI-powered DevSecOps platform, offering tools for automated software delivery, security, and compliance throughout the software development lifecycle. It provides solutions across areas such as AI-assisted development, continuous integration/continuous deployment (CI/CD), source code management, and vulnerability management. GitLab aims to simplify and accelerate software delivery by uniting development, security, and operations on a unified platform. It is particularly recognized for its AI code assistants and has been named a leader in the Gartner Magic Quadrant™ for DevOps Platforms, making it a preferred choice for many enterprises.

📋 Description

• Own and evolve the global security awareness and education program, spanning annual, new-hire, role-based, targeted, executive, and microlearning content. • Lead the phishing simulation program end to end — design, deployment, analysis, and targeted follow-up. • Apply behavior change principles to reinforce secure habits and address priority risk behaviors. • Build and sustain security culture through learning campaigns, Security Awareness Month, and ongoing engagement. • Produce multimedia awareness and education content, including video. • Administer the training and phishing platforms, owning program data and reporting end to end. • Define and report performance indicators to Security Assurance leadership. • Own vendor relationships for phishing, secure coding (OWASP) training, and video production. • Lead market and competitor evaluations, renewal decisions, and cost negotiation, recommending in-house builds where commercial options underperform. • Collaborate on and maintain security policies, standards, and procedures. • Coordinate audit evidence and demonstrate control effectiveness. • Track remediation of identified gaps to closure.

🎯 Requirements

• A minimum of 10 years' experience building or scaling global awareness and human-risk programs in a large, globally distributed enterprise, with measurable outcomes; regulated-industry experience preferred. • SANS Security Awareness Professional (SSAP) certification, or equivalent demonstrated expertise in building, maintaining, and measuring a mature awareness program. • Demonstrated experience running enterprise-scale phishing programs and organization-wide awareness campaigns. • Track record of evaluating, selecting, consolidating, or replacing security training vendors, including cost and value analysis. • Instructional design capability • Working knowledge of security policy development, audit support, and control evidence. • Ability to influence enterprise strategy across technical and non-technical teams without formal authority. • Ability to make complex security topics practical and engaging in an all-remote organization. • Track record of onboarding, managing, and negotiating with third party vendors.

🏖️ Benefits

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave